yeah so as a test we downloaded the package and did exactly what the instructions say here https://osquery.readthedocs.io/en/stable/installation/install-osx/ then replaced the contents of the flag file located at /private/var/osquery/osquery.flags with our configuration